user auth
clean up